(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 

International Bureau 

(43) International Publication Date 
8 March 2001 (08.03.2001) 




PCT 



(10) International Publication Number 

WO 01/17214 Al 



(51) International Patent Classification 7 



(21) International Application Number: PCT/US00/24022 

(22) International Filing Date: 1 August 2000 (01.08.2000) 
(25) Filing Language: English 



H04M 3/00 (81) Designated States (national)'. AE, AG, AL, AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CR, CU, CZ, 
DE, DK, DM, DZ, EE, ES, FI, GB, GD, GE, GH, GM, HR, 
HU, ID, IL, IN, IS, JP, KE, KG, KP, KR, KZ, LC, LK, LR, 
LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, 
NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, SL, TJ, TM, 
TR, TT, TZ, UA, UG, UZ, VN, YU, ZA, ZW. 



(26) Publication Language: 



English 



(30) Priority Data: 

09/387,463 



1 September 1999 (01.09. 1999) US 



(71) Applicant: WEBLINK WIRELESS, INC. [US/US]; 
3333 Lee Parkway, Suite 100, Dallas, TX 75219 (US). 

(72) Inventor: LARGHI, Steven; 1548 Creekview Drive, 
Keller, TX 76248 (US). 

(74) Agents: MUNCK, William, A. et al.; Novakov Davis, 
P.C, Suite 2000, 750 North St. Paul Street, Dallas, TX 
75201-3286 (US). 



(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, MZ, SD, SL, SZ, TZ, UG, ZW), Eurasian 
patent (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), European 
patent (AT, BE, CH, CY, DE, DK, ES, FI, FR, GB, GR, IE, 
IT, LU, MC, NL, PT, SE), OAPI patent (BF, BJ, CF, CG, 
CI, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG). 

Published: 

— With international search report. 

For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations " appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



(54) Title: SYSTEM AND METHOD FOR OVER-THE-AIR REPROGRAMMING OF AN ADVANCED WIRELESS MESSAG- 
ING DEVICE 



205-Y 



210 



TRANSCEIVER 



124 

_i 

215 

S 

MESSAGE 
CONTROLLER 



240- 



MONITORED 
EQUIPMENT 



232- 

234 ~ 
236 
238 



DOWNLOADED 
TARGET 
PROGRAM 



UPDATE 
PROGRAM 



RADIO 
CONTROL 



COPY 
CONTROL 



220 



BIOS 
PROGRAM 



UPDATE 
PROGRAM 



APPLICATION 
PROGRAM 



222 
224 
226 



(57) Abstract: There is disclosed, for use in a wireless messaging device, an update controller for performing an over-the-air (OTA) 
update of a first program stored in an erasable read-only memory (ROM) (220) in the wireless messaging device. The update con- 
troller comprises: 1) a transceiver (210) for transmitting and receiving wireless messages to and from a base station in a wireless 
network, and 2) a message controller (215) coupled to the transceiver for detecting an OTA update message transmitted by the base 
station. In response to detection of the OTA update message, the message controller (215) transfers an update control program (224) 
stored in the erasable ROM (220) to a random access memory (RAM) coupled to the message controller (215) and executes the up- 
date control program from the RAM (230). Under control of the update control program (224) in RAM (230), the message controller 
(215) receives a replacement program over the air and overwrites at least a portion of the first program stored in the erasable ROM 
(220). 
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SYSTEM AND METHOD FOR OVER-THE-AIR REPROGRAMMING 
OF AN ADVANCED WIRELESS MESSAGING DEVICE 

CROSS-REFERENCE TO RELATED APPLICATIONS 
5 The present invention is related to those disclosed in 

the following United States Patent Applications: 

1. Serial No. 09/002,191, filed December 31, 1997, 
entitled "ANTENNA SYSTEM FOR NARROWBAND COMMUNICATIONS 
SYSTEMS AND METHOD OF OPERATION'' ; 
10 2. Serial No. 09/001,717, filed December 31, 1997, 

entitled "CONTROLLER FOR USE WITH COMMUNICATIONS SYSTEMS 
FOR CONVERTING A VOICE MESSAGE TO A TEXT MESSAGE" ; 

3. Serial No. 09/001,759, filed December 31, 1997, 
entitled "SYSTEM FOR SCHEDULING REVERSE -CHANNEL MESSAGES IN 

15 NARROWBAND COMMUNICATIONS SYSTEMS AND METHODS OF 

OPERATION" ; 

4. Serial No. 09/138,438, filed August 21, 1998, 
entitled "SYSTEM AND METHOD FOR MODELING SIMULCAST DELAY 
SPREAD AND OPTIMIZING LAUNCH DELAYS"; 

20 5. Provisional Serial No. 60/098,873, filed 

September 1, 1998, entitled "NARROWBAND TELEMETRY SYSTEM 
AND METHODS OF OPERATION" ; 

6. Serial No. [Attorney Docket No. PAGE01- 00149] , 
filed concurrently herewith, entitled "SYSTEM AND METHOD 

2 5 FOR CONTROLLING AN END-USER APPLICATION AMONG A PLURALITY 

OF COMMUNICATION UNITS IN A WIRELESS MESSAGING NETWORK" ; 

7. Serial No. [Attorney Docket No. PAGE01-00163] , 
filed concurrently herewith, entitled "SYSTEM AND METHOD 
FOR CONTROLLING TRANSMITTER POWER OF A NARROWBAND ADVANCED 

3 0 MESSAGING SYSTEM"; and 

8. Serial No. [Attorney Docket No. PAGE01-00164] , 
filed concurrently herewith, entitled "SYSTEM AND METHOD 
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FOR TRANSMITTING SUBSCRIBER DATA IN A NARROWBAND ADVANCED 
MESSAGING SYSTEM USING UNSCHEDULED MESSAGE TIME SLOTS." 

The above applications are commonly assigned to the 
assignee of the present invention. The disclosures of 
5 these related patent applications are hereby incorporated 

by reference for all purposes as if fully set forth herein. 

TECHNICAL FIELD OF THE INVENTION 

10 The present invention is directed, in general, to 

wireless communication systems and methods of operating the 
same and, in particular, to systems and methods for 
reprogramming wireless messaging devices over the air. 
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BACKGROUND OF THE INVENTION 

The demand for better and cheaper wireless 
communication services and equipment continues to grow at 
5 a rapid pace. Much of this growth is spurred by the 

Federal Communication Commission's ("FCC") approval of 
certain frequency bands for the next generation of Personal 
Communication Service ("PCS") devices that provide advanced 
voice and/or data messaging services, as well as voice 

10 telephone services. A relatively small portion of the 

available frequency bands was set aside for narrowband PCS 
("NPCS") to encourage efficient use of the available 
spectrum. There are a number of well-known wireless 
communication techniques that attempt to maximize the 

15 efficiency with which the available spectrum is used. 

These methods include frequency division multiple access 
("FDMA"), time division multiple access ( "TDMA" ) , code 
division multiple access ("CDMA"), and the like. The term 
"multiple access" means that multiple subscribers (or 

20 users) are able to communicate simultaneously with each of 

these systems . 

In general, the infrastructure of a messaging system 
is somewhat different than cellular telephone systems. For 
instance, in a NPCS messaging system, all of the base 

25 station transmitters throughout a wide coverage area are 

synchronized and simultaneously broadcast (i.e., simulcast) 
a message in a forward- channel to a subscriber's wireless 
communication unit (e.g., portable message pagers, fixed 
messaging or telemetry devices, etc.). This simulcast 

30 increases the likelihood that the transmitted message will 

reach the device even through obstacles, such as buildings, 
trees, overpasses, and the like. Likewise, the subscriber 
communication units are capable transmitting messages in a 
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reverse -channel to numerous receivers associated with the 
base stations. However, the messaging system does not 
assign the subscriber to a particular cell and does not 
transmit to the subscriber only in one cell, as in the case 
5 of a cellular telephone system. 

Telemetry systems, broadly stated, are communication 
systems that transmit "status" information from a remote 
process, function, or device (collectively, "telemetry 
application") to a central control facility. Telemetry 

10 systems may be used in lieu of maintenance workers to 

remotely monitor a given telemetry application, such as a 
utility meter, security system, vehicle locator, 
environmental monitor, vending machine, medical equipment, 
oil drilling equipment, and the like. 

15 It is highly desirable to be able to update the 

programs in a subscriber communication unit by means of an 
over-the-air ("OTA") update procedure. This allows 

software errors to be fixed after the subscriber 
communication unit is distributed to end users and also 

20 allows the capabilities of the installed software to be 

upgraded or even completely changed. It also allows a 
"blank" subscriber communication unit to be distributed to 
an end user with only a basic operating system for 
controlling the radio functions of the subscriber 

25 communication unit installed in the unit, and no end-user 

application installed. Thereafter, the end user may 
install customized applications in the subscriber 
communication unit via an OTA update. For example, a 
vending machine company may purchase generic subscriber 

30 communication units and install them in vending machines. 

Vending machine control software may then be installed in 
each generic subscriber communication unit by means of an 
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OTA update routine. Subsequently, software corrections and 
upgrades may be installed by means of an OTA routine. 

Unfortunately, the amount of read only memory (ROM) in 
a subscriber communication unit is very limited, 
particularly in small wireless messaging devices such as 
pagers. An erasable ROM is used to store the BIOS program 
and the end-user application for which the subscriber 
communication unit is used. The smallness of the erasable 
ROM (also known as a "flash ROM 7 ') may make it impossible to 
download a new application and/or BIOS program u over the 
air" because the BIOS program and the existing application 
program (s) consume too much space in the ROM. 

Therefore, there exists a need in the art for systems 
and methods for performing over-the-air updates of wireless 
messaging devices. In particular, there exists a need for 
systems and method for performing over-the-air updates of 
wireless messaging devices in which the amount of erasable 
ROM available is severely limited. 



WO 01/17214 



PCT/US00/24022 



-6- 

SUMMARY OF THE INVENTION 

To address the above-discussed deficiencies of the 
prior art, it is a primary object of the present invention 
5 to provide, for use in a wireless messaging device, an 

update controller for performing an over-the-air (OTA) 
update of a first program stored in an erasable read-only 
memory (ROM) in the wireless messaging device. In an 
advantageous embodiment of present invention, the update 

10 controller comprises: 1) a transceiver capable of receiving 

wireless messages from a base station in a forward channel 
and transmitting wireless messages to the base station in 
a reverse channel; and 2) a message controller coupled to 
the transceiver capable of detecting an OTA update message 

15 transmitted by the base station, wherein the message 

controller, in response to detection of the OTA update 
message, transfers an update control program stored in the 
erasable ROM to a random access memory (RAM) coupled to the 
message controller and executes the update control program 

2 0 from the RAM. 

In one embodiment of the present invention, the 
message controller, under control of the update control 
program, receives from the transceiver a second program 
suitable for replacing the first program and stores at 

2 5 least a portion of the second program in the RAM. 

In another embodiment of the present invention, the 
message controller, under control of the update control 
program, transfers at least a portion of the second program 
from the RAM to the erasable ROM. 

3 0 In still another embodiment of the present invention, 

the message controller, in transferring the at least a 
portion of the second program to the erasable ROM, 
overwrites at least a portion of the first program. 
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In still another embodiment of the present invention, 
the update controller transmits an update request message 
to the base station, wherein transmission of the update 
request message causes the OTA update message to be 
5 transmitted to the update controller by the base station. 

In a further embodiment of the present invention, the 
update controller periodically transmits the update request 
message according to a time period modifiable by a user of 
the wireless messaging device. 

10 In a still further embodiment of the present 

invention, the update controller transmits the update 
request message in response to a triggering event . 

In a yet further embodiment of the present invention, 
the triggering event is at least one of: 1) a manual input 

15 received from a user of the wireless messaging 

device; 2) an input received from monitored equipment 
coupled to the wireless messaging device; and 3) an error 
occurring during execution of the first program. 

The foregoing has outlined rather broadly the features 

2 0 and technical advantages of the present invention so that 

those skilled in the art may better understand the detailed 
description of the invention that follows. Additional 
features and advantages of the invention will be described 
hereinafter that form the subject of the claims of the 

25 invention. Those skilled in the art should appreciate that 

they may readily use the conception and the specific 
embodiment disclosed as a basis for modifying or designing 
other structures for carrying out the same purposes of the 
present invention. Those skilled in the art should also 

30 realize that such equivalent constructions do not depart 

from the spirit and scope of the invention in its broadest 
form. 
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Before undertaking the DETAILED DESCRIPTION, it may be 
advantageous to set forth definitions of certain words and 
phrases used throughout this patent document : the terms 
"include" and "comprise," as well as derivatives thereof, 
mean inclusion without limitation; the term "or," is 
inclusive, meaning and/or; the phrases "associated with" 
and "associated therewith," as well as derivatives thereof, 
may mean to include, be included within, interconnect with, 
contain, be contained within, connect to or with, couple to 
or with, be communicable with, cooperate with, interleave, 
juxtapose, be proximate to, be bound to or with, have, have 
a property of, or the like; and the term "controller" means 
any device, system or part thereof that controls at least 
one operation, such a device may be implemented in 
hardware, firmware or software, or some combination of at 
least two of the same. It should be noted that the 
functionality associated with any particular controller may 
be centralized or distributed, whether locally or remotely. 
Definitions for certain words and phrases are provided 
throughout this patent document, those of ordinary skill in 
the art should understand that in many, if not most 
instances, such definitions apply to prior, as well as 
future uses of such defined words and phrases. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present 
invention, and the advantages thereof, reference is now 
made to the following descriptions taken in conjunction 
with the accompanying drawings, wherein like numbers 
designate like objects, and in which: 

FIGURE 1 illustrates a representative portion of an 
exemplary messaging network in accordance with one 
embodiment of the present invention; 

FIGURE 2 illustrates an exemplary one of the 
subscriber communication units for use in the network in 
FIGURE 1 in accordance with one embodiment of the present 
invention; 

FIGURE 3 illustrates in greater detail a portion of 
the control facility in FIGURE 1 in accordance with one 
embodiment of the present invention; and 

FIGURE 4 is a flow diagram illustrating an over-the- 
air software update procedure in accordance with one 
embodiment of the present invention. 
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DESCRIPTION OF THE INVENTION 

FIGURES 1 through 4, discussed below, and the various 
embodiments used to describe the principles of the present 
invention in this patent document are by way of 
illustration only and should not be construed in any way to 
limit the scope of the invention. Those skilled in the art 
will understand that the principles of the present 
invention may be implemented in any suitably arranged 
wireless messaging network. 

Turning initially to FIGURE 1, there is illustrated a 
representative portion of a conventional messaging network 
(generally designated "100" and referred to below as 
"network 100") . Network 100 provides two-way data messages 
to subscribers (or users) of network 100. Network 100 is 
represented by three exemplary fixed land sites, called 
base stations, which communicate with a plurality of 
subscriber communication units 121-128 (e.g., message 
pagers, telemetry devices, PCS devices, personal data 
assistants, or other processing systems that include 
wireless communication capability, etc.) within 
network 100. 

Base stations 111, 112 and 113, each labeled U BS" in 
FIGURE 1, have coverage areas 101, 102, and 103, 
respectively, that are determined by the power of the 
transmitters in base stations 111, 112, and 113. For the 
purposes of illustration and discussion, coverage 
areas 101, 102, and 103 are shown as circles. In real 
world environments, however, each of coverage 
areas 101, 102, and 103 may differ significantly from an 
idealized circular form. 

For purposes of illustration, a plurality of 
subscriber communication units, each labeled "P" in 
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FIGURE 1, are shown scattered throughout messaging 
network 100. Subscriber communication units 121 and 122 
are located within coverage area 101 and may engage in two- 
way messaging with base station 111. Subscriber 
5 communication units 123 and 124 are located in coverage 

area 102 and may engage in two-way messaging with base 
station 112. Subscriber communication units 126, 127 
and 12 8 are located in coverage area 103 and may engage in 
two-way messaging with base station 113. Subscriber 

10 communication unit 125 is located in coverage areas 102 

and 103 and may engage in two-way messaging with base 
stations 112 and 113. 

In a NPCS environment, base stations 111, 112, and 113 
transmit signals in a f orward- channel , such as from 939-940 

15 MHZ, for example. Base stations 111, 112, and 113 receive 

signals in a reverse -channel at, for example, 901-902 MHZ. 
Each base station is effectively a transceiver that 
contains a transmitter and a receiver for carrying out two- 
way communications. Each subscriber communication unit 

20 receives forward- channel messages directed to it at a 

selected frequency within the f orward- channel . Each 
communication also transmits reverse- channel messages at a 
selected frequency within the reverse - channel . 

Messaging network 10 0 may be, for example, a two-way 

25 wireless messaging system compatible with the MOTOROLA® 

ReFLEX™ transport protocol . The Re FLEX™ protocol may be 
used to send a message to a subscriber communication unit. 
The subscriber communication unit may then transmit in the 
reverse -channel an automatic acknowledgment message that 

30 does not require subscriber action. Alternatively, the 

ReFLEX™ protocol may be used in an enhanced messaging mode 
to send a more complex message to the subscriber 
communication unit. The subscriber communication unit may 
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then transmit in the reverse -channel an automatic 
acknowledgment message that does not require subscriber 
action. Some time later, the subscriber may transmit a 
"canned" message stored in the subscriber communication 
5 unit, such as "Will Call You Later" , or a unique message 

composed by the subscriber using a keypad on the subscriber 
communication unit. 

Base station 111 transmits messages to subscriber 
communication units in coverage area 101. Base station 112 

10 transmits messages to subscriber communication units in 

coverage area 102. Base station 113 transmits messages to 
subscriber communication units in coverage area 103. Base 
stations 111, 112, and 113 may be associated with one 
another and to a control facility 10 by a wired backbone, 

15 such as a proprietary fiber-optic network. In alternate 

embodiments, base stations 111, 112, and 113 may be 
associated with one another and to control facility 10 by 
a satellite communications link, such as through a very 
small aperture terminal ( "VSAT" ) . 

2 0 It should be noted that while the illustrated 

embodiment discloses centralized control facility 10 for 
controlling communication among the exemplary subscriber 
communication units, in alternate advantageous embodiments 
communications control may be distributed. It should also 

25 be noted that messages may be received into control 

facility 10 from a variety of sources. Some messages may 
be received from a public telephone system in the form of 
simple call -back numbers entered by a caller on a DTMF 
keypad. Other messages may be received by control 

30 facility 10 from an Internet connection. Additionally, and 

most importantly in the context of the present invention, 
messages may be received from subscriber communication 
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units, such as telemetry devices dispersed over a wide 
area . 

Turning to FIGURE 2, there is illustrated a block 
diagram of an exemplary one of subscriber communication 
5 units 121-128 for use in network 100. Exemplary subscriber 

communication unit (SCU) 124 may comprise a two-way paging 
device used by a subscriber or may be a part of a telemetry 
device that is used to transmit to network 100 measured 
data, status messages, alarm messages, and the like from a 

10 monitored piece of equipment in which SCU 124 is 

incorporated. The monitored piece of equipment may 
comprise a vending machine, medical equipment, a home alarm 
system, remote oil field equipment, remote power generation 
equipment, and the like. 

15 Exemplary SCU 124 comprises antenna 2 05, 

transceiver 210, message controller 215, an electronically 
erasable programmable read only memory (EEPROM) 22 0 
(referred to hereafter as "'flash ROM 220"), and random 
access memory (RAM) 230. Optionally, in a telemetry 

20 application of the present invention, SCU 124 may also 

comprise monitored equipment 24 0 that generates telemetry 
data that is transmitted to control facility 10 and then 
relayed on to a final destination. 

Antenna 2 05 transmits and receives RF signals between 

25 base station 112 and SCU 124, including standard NPCS 

communication messages and messages associated with the OTA 
reprogramming capability of the present invention. 
Transceiver 210 down-converts the received RF signals into 
binary messages for transfer to message controller 215 and 

3 0 up-converts to RF signals the binary messages received from 

message controller 215. 

Message controller 215 comprises standard means for 
interfacing with transceiver 210, flash ROM 220, RAM 230, 
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and monitored equipment 240. Message controller 215 
executes BIOS program 222 and application program 22 6 
stored in flash ROM 22 0 and controls the operation of 
SCU 124 under the direction of these programs. Message 
5 controller 215 responds to stored OTA reprogramming 

messages and data to accomplish partial or complete 
replacement of the programs in flash ROM 220. 

Under normal operating conditions, message 
controller 215 coordinates communications between SCU 124, 

10 any directly interfacing devices, and network 100. 

Periodically, message controller 215 may detect the 
initiation of an OTA reprogramming event. Once message 
controller 215 determines that an OTA reprogramming event 
has been initiated, message controller 215 copies update 

15 program 224 from flash ROM 22 0 to update program 234 space 

in RAM 230. At that time, message controller 215 begins to 
execute the update program from update program 234. When 
message controller 215 determines that OTA reprogramming is 
completed, it returns to the normal operating mode under 

2 0 the direction of BIOS program 222 and/or application 

program 226 in flash ROM 220. 

Under normal operations, BIOS program 222 controls the 
basic operations of SCU 124, including the operation of 
transceiver 210. Application program 226 comprises the 
25 basic end-user application performed by subscriber 

communication unit 124. For example, application 

program 226 is a telemetry program if SCU 124 is used in a 
telemetry application. Alternatively, application 

program 226 may be a text messaging program if SCU 124 is, 

3 0 for example, a two-way paging device. 

RAM 230 is normally used to store the wireless 
messages transmitted and received by SCU 124. However, in 
accordance with the principles of the present invention, 
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all or portions of RAM 23 0 are reallocated as space for 
downloaded target program 2 32 and update program 234 during 
an over-the-air (OTA) reprogramming operation (event) for 
SCU 124. The memory space for update program 234 is 
5 further divided into sub- spaces for radio control 

routine 236 and copy control routine 238. 

As previously discussed, when message controller 215 
determines that a reprogramming event has been initiated, 
it causes the content of update program 224 to be copied 

10 into RAM 230 space for update program 234. Update 

program 224 in flash ROM 22 0 may contain all of radio 
control routine 236 and copy control routine 238. 
Alternatively, message controller 215 may copy a portion or 
all of radio control routine 23 6 from a part of BIOS 

15 program 222. Radio control routine 236 represents the 

portion of update program 234 which is reserved for 
software associated with controlling the operation of 
transceiver 210 during reprogramming events. Radio control 
routine 236 maintains communication with network 100 

20 through base station 112, including time intervals when 

SCU 124 is being reprogrammed through OTA update of the 
present invention. 

Copy control routine 23 8 represents the portion of 
update program 234 that stores downloaded target 

2 5 program 2 32 in RAM 234 during the OTA update and then 

transfers it to flash ROM 22 0 when the OTA update is 
complete. Downloaded target program 232 is the replacement 
program that is received over-the-air from base station 112 
and that replaces part of, or all of, the programs 

30 initially in flash ROM 220. 

An OTA reprogramming event may be initiated in several 
ways. In one embodiment, SCU 124 may transmit an update 
request message (reprogramming event) through base 
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station 112 according to a periodic occurrence, such as 
reception of a signal from an internal or external clock 
timer, or intermittently according to a user command or the 
detection of an error, such as major power interruption or 
5 software conflict, and the like. In these cases, control 

facility 10 comprises means for detecting the presence of 
the update request message for a specific program update 
from SCU 124 and responding with a program update command. 
SCU 124 recognizes the program update command as an 

10 indication that a reprogramming event has been initialized. 

In a second embodiment, control facility 10 comprises 
means for detecting an update of a specific program in 
SCU 124 without regard to receiving an update request from 
SCU 124 . These means are similar to those discussed for 

15 SCU 124, such as the expiration of a clock period, a 

triggering signal, a system error, user command, and the 
like. In the case of user commands, these may be received 
through other SCUs, the PSTN, or other means and may 
include the capability of initiating a reprogramming event 

2 0 for all or a portion of the SCUs associated with 

network 100. For instance, a particular user with a group 
of remote telemetry devices may transmit an update command 
for an application program associated with all of the 
telemetry devices. Control facility 10 determines that an 
25 update command has been received, identifies the SCUs 

associated with the applicable group, and transmits an 
update program command to each member of the group, such as 
SCU 124. Control facility 10 further comprises the means 
to transfer an update or updates of the targeted program in 

3 0 response to individual and/or multiple OTA reprogramming 

acknowledgments from applicable SCUs. SCU 124 responds to 
an unsolicited program update command from base station 112 
in the same manner as when SCU 124 first transmits an 
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update request message. In other words, SCU 124 recognizes 
the beginning of an OTA reprogramming event with reception 
of an update program command, regardless of how the event 
is initiated. 

5 When an OTA update procedure is in progress, SCU 124 

initially stores the incoming new program, referred to as 
"downloaded target program 232" in RAM 230. Subsequently, 
SCU 124 transfers a copy of downloaded target program 232 
to flash ROM 23 0, overwriting some or all of one or more of 

10 BIOS program 222, update program 224, and application 

program 226. If update program 224 is overwritten, 
downloaded target program 232 preferably comprises a 
replacement update program 224, or else the update 
(reprogramming) capability will be lost. 

15 FIGURE 3 illustrates in greater detail base 

station 112 and a portion of control facility 10 
responsible for performing over-the-air updates in 
accordance with one embodiment of the present invention. 
Control facility 10 comprises transceiver interface 

20 (IF) 305, which communicates with bases station 112, 

message controller 310, network interface (IF) 315, update 
supervisor 320, and memory 325, which stores target 
program 33 0. Target program 33 0 is the update (or 
replacement) program that must be transmitted to SCU 124 

25 for installation in all or part of flash ROM 220 in order 

to upgrade and/or replace one or more of the programs 
therein. 

Transceiver IF 3 05 transfers incoming and outgoing 
messages between base station 112 and message 
30 controller 310. Message controller 310 performs 

conventional wireless messaging functions and transfers 
data between transceiver IF 3 05 and network IF 315. 
Message controller 310 also transfers data between update 
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supervisor 32 0 and either or both of transceiver IF 3 05 and 
network IF 315. Under the direction of update 

supervisor 320, message controller 310 recognizes the 
initiation of an OTA update procedure, transferring target 
5 program 33 0 as required in support of the OTA update, 

providing necessary responses during the progression of the 
OTA update, and returning to normal operation once the OTA 
update has been completed. 

Network IF 315 comprises means for transferring data 

10 between one or more end-users and message controller 310. 

Network IF 315 may interface with end-users through various 
means, including but not limited to base stations 
associated with network 10, the public switched telephone 
network (PSTN) , other wireless networks, and other well 

15 known and/or specialized interfaces. Update supervisor 320 

comprises means for recognizing, monitoring, and/or 
coordinating an OTA update procedure in conjunction with 
message controller 310. In addition, update supervisor 320 
transfers a replacement program between message 

20 controller 310 and target program 33 0 storage space in 

memory 32 5. 

FIGURE 4 depicts flow diagram 400, which illustrates 
an exemplary over-the-air (OTA) update procedure in 
network 10 0 in accordance with one embodiment of the 

25 present invention. Exemplary control facility 10 initiates 

a reprogramming event by transmitting an update command 
through base station 112 to SCU 124 (process step 405) . 
Control facility 10 may transmit the update command in 
response to internally generated or externally received 

3 0 commands or trigger signals, in response to expiration of 

a time interval, or in response to an OTA update request 
message from SCU 124. 
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SCU 124 recognizes the update command from control 
facility 10 in an incoming message, causing message 
controller 215 to halt operation of on-going program (s) , to 
transfer a copy of update program 224 to update program 234 
5 space in RAM 23 0, and to transfer program control to update 

program 234 (process step 410) . In addition, an automatic 
acknowledgment message is transferred by SCU 124 to control 
facility 10 through base station 112, per standard message 
networking requirements . 

10 Next, control facility 10 transfer target program 330 

over the air through base station 112 (process step 415) . 
Subsequently, SCU 124 stores the received program in 
downloaded target program 232 space in RAM 230. Under the 
direction of copy control 238, SCU 124 causes at least a 

15 portion of downloaded target program 234 to be copied into 

at least a portion of flash ROM 220 (process step 420) . 

When the copy procedure is complete and downloaded 
target program 234 has been successfully copied to the 
corresponding portions of flash ROM 220, Message 

20 controller 215 returns program control to flash ROM 220 and 

the new replacement is executed (process step 425) . 
SCU 124 returns to "normal" operation until another update 
command is received. 

Those of ordinary skill in the art should appreciate 

25 that they can readily use the disclosed conception and 

specific embodiments as a basis for designing or modifying 
other structures for carrying out the same purposes of the 
present invention. Those of ordinary skill in the art 
should also realize that such equivalent constructions do 

30 not depart from the spirit and scope of the present 

invention in its broadest form. 
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WHAT IS CLAIMED IS: 

1. For use in a wireless messaging device, an update 
controller for performing an over-the-air (OTA) update of 
a first program stored in an erasable read-only memory 

5 (ROM) in said wireless messaging device comprising: 

a transceiver capable of receiving wireless 
messages from a base station in a forward channel and 
transmitting wireless messages to said base station in a 
reverse channel; and 

10 a message controller coupled to said transceiver 

capable of detecting an OTA update message transmitted by 
said base station, wherein said message controller, in 
response to detection of said OTA update message, transfers 
an update control program stored in said erasable ROM to a 

15 random access memory (RAM) coupled to said message 

controller and executes said update control program from 
said RAM. 

2. The update controller set forth in Claim 1 
20 wherein said message controller, under control of said 

update control program, receives from said transceiver a 
second program suitable for replacing said first program 
and stores at least a portion of said second program in 
said RAM. 

25 

3 . The update controller set forth in Claim 2 
wherein said message controller, under control of said 
update control program, transfers at least a portion of 
said second program from said RAM to said erasable ROM. 

30 

4. The update controller set forth in Claim 3 
wherein said message controller, in transferring said at 
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least a portion of said second program to said erasable 
ROM, overwrites at least a portion of said first program. 

5. The update controller set forth in Claim 1 
wherein said update controller transmits an update request 
message to said base station, wherein transmission of said 
update request message causes said OTA update message to be 
transmitted to said update controller by said base station. 

6. The update controller set forth in Claim 5 
wherein said update controller periodically transmits said 
update request message according to a time period 
modifiable by a user of said wireless messaging device. 

7. The update controller set forth in Claim 5 
wherein said update controller transmits said update 
request message in response to a triggering event. 

8. The update controller set forth in Claim 7 
wherein said triggering event is at least one of: 

a manual input received from a user of said 
wireless messaging device; 

an input received from monitored equipment 
coupled to said wireless messaging device; and 

an error occurring during execution of said first 

program . 



WO 01/17214 



PCT/US00/24022 



-22- 

9. For use in a wireless messaging device, a method 
for performing an over-the-air (OTA) update of a first 
program stored in an erasable read-only memory (ROM) in the 
wireless messaging device comprising the steps of: 

5 detecting an OTA update message transmitted by a 

base station; 

in response to detection of the OTA update 
message, transferring an update control program stored in 
the erasable ROM to a random access memory (RAM) in the 
10 wireless messaging device and executing the update control 

program from the RAM. 

10. The method set forth in Claim 9 including the 
further steps of receiving a second program suitable for 

15 replacing the first program and storing at least a portion 

of the second program in the RAM. 

11. The method set forth in Claim 10 including the 
further step of transferring at least a portion of the 

2 0 second program from the RAM to the erasable ROM. 

12. The method set forth in Claim 11 wherein the step 
of transferring the at least a portion of the second 
program to the erasable ROM overwrites at least a portion 

25 of the first program. 

13 . The method set forth in Claim 9 including the 
further step of transmitting an update request message to 
the base station, wherein transmission of the update 
30 request message causes the OTA update message to be 

transmitted to the update controller by the base station. 
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14 . The method set forth in Claim 13 wherein the step 
of transmitting the update request message occurs 
periodically according to a time period modifiable by a 
user of the wireless messaging device. 

15 . The method set forth in Claim 13 wherein the step 
of transmitting occurs in response to a triggering event. 

16. The method set forth in Claim 15 wherein the 
triggering event is at least one of: 

a manual input received from a user of the 
wireless messaging device; 

an input received from monitored equipment 
coupled to the wireless messaging device; and 

an error occurring during execution of the first 

program . 
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17. For use in a narrowband wireless messaging 
network comprising a plurality of base stations capable of 
transmitting wireless messages in a forward channel to, and 
receiving wireless messages in a reverse channel from, a 

5 wireless communication device, an update apparatus capable 

of performing an over-the-air (OTA) update of a first 
program stored in said wireless messaging device 
comprising: 

a message controller capable of transmitting 
10 outbound messages to, and receiving inbound messages from, 

one or more of said plurality of base stations; 

an update supervisor capable of detecting an 
update indicator associated with said wireless messaging 
device and, in response thereto, transferring a second 
15 program to said message controller for transmission to said 

wireless messaging device via at least one of said 
plurality of base stations. 

18. The update apparatus set forth in Claim 17 
20 wherein said update indicator is an update request message 

received from said wireless messaging device. 

19. The update apparatus set forth in Claim 17 
wherein said update indicator is an update command received 

25 via a wired data network coupled to said update apparatus. 

20. The update apparatus set forth in Claim 17 
wherein the update indicator is triggered by an expiration 
of a user-defined update period. 

30 
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START 



TRANSMIT UPDATE COMMAND FROM 
405 — | CONTROL FACILITY 1 0 TO SUBSCRIBER 

COMMUNICATION UNIT (SCU) 124 VIA BS 112 



410 — 



IN SCU 124: 

1) HALT ON-GOING PROGRAMS; 

2) TRANSFER UPDATE PROGRAM 224 FROM FLASH 
ROM 220 TO RAM 230; AND 

3) TRANSFER PROGRAM CONTROL TO UPDATE 
PROGRAM 224 



415 — 



T 



TRANSFER TARGET PROGRAM OVER THE 
AIR FROM CONTROL FACILITY 10 TO SCU 124 



420 — 



COPY TARGET PROGRAM FROM RAM 230 
INTO AT LEAST A PORTION OF FLASH ROM 220 



425 — 



TRANSFER PROGRAM CONTROL FROM 
UPDATE PROGRAM IN RAM 230 TO TARGET 
PROGRAM IN FLASH ROM 220 



END 
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